URLhaus Database

You are currently viewing the URLhaus database entry for http://greenplastic.com/COUMDPOY6611872/Rechnung/DOC-Dokument which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:88523
URL:http://greenplastic.com/COUMDPOY6611872/Rechnung/DOC-Dokument
URL Status:Offline
Host:greenplastic.com
Date added:2018-12-04 04:33:23 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-04 04:34:11 UTC to abuse{at}liquidweb[dot]com)
Takedown time:3 days, 12 hours, 11 minutes Bad
Tags:emotet epoch2 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-052018_12_4612417929.docdocc514ae9511cb235056b9a8e129c1d20a94ee385fbf9a1a8ee9403a7eb2531923Virustotal results 13 / 59 (22.03)Heodo
2018-12-05Rechnungsbeilage_2018_12_7777769138.docdocd0205b86cf1585fad5312e678cfa4a3fcf41e063b7a0c829d7a52fd1ceea5b66Virustotal results 13 / 59 (22.03)Heodo
2018-12-05Rechnung_2018_12.docdoc45a628d0732e76ac8a93a809b52e55cf20cc21d1d2d8df2df8be24f3a6d6786fVirustotal results 13 / 61 (21.31)Heodo
2018-12-05Rechnungsbeilage_2018_12_3746408806.docdocaeebaedb24f4de24a41b009e33fb3922403d073d7a9fe32839bd90cf5566af35Virustotal results 13 / 59 (22.03)Heodo
2018-12-05Rechnungsbeilage_2018_12.docdoc65be8231da306d8db834611c8632cbeb44a308876c14053750aebacb0a2ef756Virustotal results 13 / 58 (22.41)Heodo
2018-12-05Rechnungsbeilage_05_12_2018_2867142188.docdoc2450e73a232c6cbddf70add62265297de0c5f393b69fe28c8c684572fd0f8e3en/aHeodo
2018-12-05Rechnung_05_12_2018_8480414602.docdoc28551571fd85bcfd7cdac41387d8a45e6bc1799ac6d9f881bc1b3a18c6ce6779Virustotal results 12 / 59 (20.34)
2018-12-05Rechnungsbeilage_05_12_2018_9365320955.docdoccaddf9887bdd711bd05bce8907765d4e5927af1e218be6c8f524be3cfef761c4Virustotal results 12 / 59 (20.34)Heodo
2018-12-05Rechnung_05_12_2018_1108813490.docdoc7f90717c695ae45e1873478e2028a6b4f6773f75380644212729061d896306afVirustotal results 21 / 59 (35.59)Heodo
2018-12-05Rechnung_2018_12_1616714855.docdocb1db273a6fe252dc51921e07eb20c7f816a60a064d15d212fe3f09816e15b4b3Virustotal results 20 / 58 (34.48)Heodo
2018-12-05Rechnung_05_12_2018_0731503486.docdoc8b9d5b9de38bfaf6145baba12a67a1619b9f8ce763e0ec65c4548c19611b4848n/aHeodo
2018-12-05Rechnung_05_12_2018.docdocd8426d6e3b139db1bb2138e2a5a069b35a95c1c6aade5a268832cc22e489f995Virustotal results 21 / 59 (35.59)Heodo
2018-12-05Rechnung_2018_12.docdocc7562f8a5e354e2ee898d2052ac3bfb69e428b0945fb6755acee8c0405b5b3ffVirustotal results 20 / 59 (33.90)Heodo
2018-12-05Rechnung_2018_12.docdoc563262ad37e4753c7aea049fdc55ecf1a09cb11f98b209aad5e737e5b524a3f5Virustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnungsbeilage_05_12_2018.docdoce2aa803105b9ceb5e48e918c10283811fe33b26a06dbe1ac49d1757185e4c0d4Virustotal results 20 / 58 (34.48)Heodo
2018-12-05Rechnungsbeilage_05_12_2018.docdoc8f65dc3068be3457c1e2825298e7bdc6a85339d8a7ea5887f080bb21b661fc1aVirustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnungsbeilage_05_12_2018_2805336792.docdoc1810863a184a900ebfd24c94f4008ecae4c9ff4549d18af97ebb5d5e4ff877e3Virustotal results 22 / 60 (36.67)Heodo
2018-12-05Rechnung_2018_12.docdoc23fcdb9c26aeaff325af270d526f38fff1056eee137a2009fb5799f088fa3512Virustotal results 21 / 59 (35.59)Heodo
2018-12-05Rechnung_2018_12_3240230047.docdoc4ee8e43085eaef3a6b0c2a69a161ca5f6ee547d8a31d2980f1ddd50a88673a45Virustotal results 20 / 58 (34.48)Heodo
2018-12-05Rechnungsbeilage_2018_12_8759793237.docdoc82cdb896f4ee4912a94cd3c24146d165aecabe9c46761bd27cbcad9fb6f61fb6n/aHeodo
2018-12-05Rechnung_2018_12.docdoc8a50345d8bef4cc3e948b2f70c5d8071036c13b7f3274cb92759ed856f0c6b7fVirustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnung_05_12_2018.docdoc3d9487cc7732d051f1881b5aef6f8fb8023e151b8db6928f23cf47926d949a96Virustotal results 21 / 59 (35.59)Heodo
2018-12-05Rechnungsbeilage_05_12_2018_9898758399.docdocec31014553a2384f9263ccc2b2ddbb6f423220cba59c5238161addda0ce4489eVirustotal results 21 / 58 (36.21)Heodo
2018-12-05Rechnungsbeilage_05_12_2018_8563052277.docdoc6f7ad2fd7623d93eebd6863feb0b9afe643f5b002d6b23ef0aac858ae28cefe0Virustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnung_2018_12_4803741565.docdoc7d17d6e9ca0e3c2798fca5f9370a3ca7a1f73b14305bfde914b33317a64ac2d1Virustotal results 20 / 59 (33.90)Heodo
2018-12-05Rechnung_2018_12.docdocc9723c18b3c3b72933826cf7dfa00ae770cb33083fcd9edb81e54c6331295334Virustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnung_05_12_2018_0571464788.docdocff05ea98435cb0f859f8ca17d5a0c5e9bd19baf041bc2cbf1fb6d14de8e3409fVirustotal results 21 / 59 (35.59)Heodo
2018-12-05Rechnungsbeilage_05_12_2018.docdoc0e12bbdd59bcd12a9dd6605a27e7832f8ff38a5efd369d75060eab295887d1dcVirustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnungsbeilage_05_12_2018_3294292347.docdoc4e8431f0402f2f8d7d58be6e4b310510388503b3c3b467c80f64961939380c7fVirustotal results 20 / 59 (33.90)Heodo
2018-12-05Rechnungsbeilage_2018_12.docdoc6649e73aa07b03757530960d62ed58c59474b99c8a32af740040c9bf98ca9beaVirustotal results 21 / 60 (35.00)Heodo
2018-12-05Rechnung_05_12_2018_7156804790.docdocd265dc3ce29a72f61d27c99f48d1d1aaa8b1841f2977e138b9de92600fbada30n/aHeodo
2018-12-05Rechnungsbeilage_2018_12.docdoc8d7461a6fd99620563543c558f4bd64c063e454384956a6c96b3d3ce45b8f52cn/aHeodo
2018-12-04Rechnung_2018_12_3149331433.docdocc9fb2fad50c2ec088fdca9d597f06e6173f56fff2b68ebe02865ab8c96ffb68bVirustotal results 20 / 60 (33.33)Heodo
2018-12-04Rechnung_05_12_2018_4196024424.docdoc7ca9b88850897a30d513d67427cf6edc5f7117bbc3aab650a588d3659fd1340aVirustotal results 20 / 60 (33.33)Heodo
2018-12-04Rechnung_2018_12.docdoc93ff01284f8ad43f3f5c70474524f3f59dd32d1aeda8a89a4b0e267509c6283bVirustotal results 20 / 60 (33.33)Heodo
2018-12-04Rechnungsbeilage_05_12_2018_8756128405.docdocba72dcc2217870b876d7a047c2e612be57d358013d87c344ed1e7e4dbd890bb0Virustotal results 19 / 60 (31.67)Heodo
2018-12-04Rechnungsbeilage_05_12_2018_6068232582.docdoc1b1d25c3375467e5bda525fc3f0d1bc7b7956bcc65c04ced4304e0525a1b25adn/aHeodo
2018-12-04Rechnungsbeilage_2018_12_2743127925.docdoc2ce39d51904a377d45c4ee88aaf67f647d9b26e7f61dd4aaf8850ec616906c69Virustotal results 19 / 58 (32.76)Heodo
2018-12-04Rechnungsbeilage_2018_12_7655123148.docdoc16517d63733adb68c81b4ff9a3d7ccad00c32aac2c36b0a5e8bdbbbf41782ad3Virustotal results 18 / 58 (31.03)Heodo
2018-12-04Rechnungsbeilage_05_12_2018.docdoc3b005d61ac9eaf399b8bf7c5d24b56ee6120cb4944f84bdedf1ccb97fe4289faVirustotal results 19 / 60 (31.67)Heodo
2018-12-04Rechnung_2018_12.docdoc1578faac907f7ed59d1168d19cf71dd017f451b2131f20fa3eb42fe6d1b13c59Virustotal results 19 / 60 (31.67)Heodo
2018-12-04Rechnung_2018_12.docdoc4f0a6a377085179b99ad14ec5a8ccbbd9c0b42230ed54eef3591049ee2d17b7eVirustotal results 19 / 59 (32.20)Heodo
2018-12-04Rechnungsbeilage_05_12_2018_4776148193.docdoc101bfda69811ce4e43b7ebe4d2a62f9dd3b03927cbeee59d7cdec29746287368Virustotal results 19 / 60 (31.67)Heodo
2018-12-04Rechnung_04_12_2018.docdoc7d035fb0bcaf4bb082b4baa943fbf640499924178020b781dbd664300244c77en/aHeodo
2018-12-04Rechnung_2018_12_9364077332.docdoc0bc5c58e628682b967121a44acc10149b10123ca7c463d8022e2ea68426426f3Virustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnung_2018_12_4971201514.docdoc9ce08f6727a6cc2eba821a4876eff14143704772f4bbcdbabdf2810479996830Virustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnung_04_12_2018.docdoc6ca2cc3ed432d9df2b8febde6803866313ba59aad66931fe9d96f74e05134885Virustotal results 15 / 60 (25.00)Heodo
2018-12-04Rechnung_2018_12.docdoc0b2b4ef20579d63f9e27769ae384b132140b2449b042df0a58248e35f5183d3bn/aHeodo
2018-12-04Rechnung_2018_12_7389947011.docdoc7d9c1db0c4dcc76ea51fb79f47022d0c9e8472dee945f3c008a58003be85927aVirustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnungsbeilage_04_12_2018_6366065610.docdoc146e71b5b88ad01740f2f27886f34331033fd2d7bce145e0a7d832b3283c1faaVirustotal results 15 / 57 (26.32)Heodo
2018-12-04Rechnung_2018_12_8390587480.docdoce2e4ae4c6c9ba761b0b68d0660e1c90b455119538d1c05b665bbd249f8763fdbVirustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnungsbeilage_04_12_2018_1419964730.docdoc377054048be0cd5b797abad2fc50ee967e8943f9aabc14aa0549ab9906a37fd3Virustotal results 15 / 60 (25.00)Heodo
2018-12-04Rechnung_04_12_2018.docdocb6344a5eeb760b648e7b641e2c165c8e95a0b8f287e0a4d818a650ac8258a170n/aHeodo
2018-12-04Rechnung_04_12_2018_9151211441.docdoc074cb06cc568f50e5f766b8787ef17bf87cee44e0bb21bd07f05a917e53010ebVirustotal results 15 / 60 (25.00)Heodo
2018-12-04Rechnung_04_12_2018_3127855659.docdoc0650d6c6b29f4276f0eb1e00f93f60efb4ccea01563242abec3e85dfe775ea4dVirustotal results 15 / 61 (24.59)Heodo
2018-12-04Rechnungsbeilage_2018_12_9179840853.docdoc7549f1311157ee5f8300ce83074589b76bf08fce802bb8ee55d1a1626455dc4eVirustotal results 15 / 60 (25.00)Heodo
2018-12-04Rechnung_04_12_2018_0858932260.docdoc5bfa76af1d09e40ab71f733a9b376ce46164a4d94403dc7fa887dd1fcb6ee244Virustotal results 13 / 56 (23.21)Heodo
2018-12-04Rechnungsbeilage_2018_12.docdoc7884ce53d227958d1a8d04fb83a2f6dd7fac10df0e19d76580f4bcc6b93c9118Virustotal results 14 / 61 (22.95)Heodo
2018-12-04Rechnungsbeilage_04_12_2018_1396687007.docdoce8a0d3983cca801dc6e49658e7aa7ea199a6a84232baee2d8543c5c49c64cd49Virustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_2018_12.docdoce7ab2f918c92f255e167491b2f78da7ecd73d90cc358627bfc7feb0e6909eb5dVirustotal results 14 / 58 (24.14)Heodo
2018-12-04Rechnung_2018_12.docdoc6a6ae114fbf614fc2f11f43bd222d41f51453f0b79bb23d50e4af1c7cb380e66Virustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_2018_12.docdocffa301ebf4507deb9693666b84774be51263be93dbd1c85b93364271b92f49ebVirustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_04_12_2018.docdocc7ebf0d2f9703bf38b378f48c09495db0c916a88687c722d48d95f5893612f7dVirustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_2018_12.docdoc5eb7d3aeee5ebed0d4f8535350ad25c88a91010e7e6cee6877fb840173046b40Virustotal results 14 / 58 (24.14)Heodo
2018-12-04Rechnungsbeilage_2018_12_8848162027.docdoc2455688f6143f2a448e4290d42ad2ec8127b239392d84a2487fd175a34b81c7fVirustotal results 14 / 58 (24.14)Heodo
2018-12-04Rechnungsbeilage_2018_12_4517381110.docdoc2706f32f91b678e5597b793c9087ccc06825f9a99fb5babc3f413a04f6d01ef3Virustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_2018_12_5349894378.docdoc06132dd35f879ce9935e0c8a47a1fcb7169b05a86d7f9c5291a614e0a0848467Virustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_04_12_2018_5553547571.docdoc570e385acd37ae6c7131be5658075be78bb8b9e71792ec7f25366cf126bda56bVirustotal results 14 / 60 (23.33)Heodo
2018-12-04Rechnungsbeilage_2018_12.docdoc13245d8c8f52e12a3d3477f0f1e4312e98cc616b3055ea02584c3182d36d4fe8Virustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnungsbeilage_04_12_2018_8149231390.docdocf5abc12da196850236b5a32fe7c2b36143b95aebe1faeea4494f4a3722d29ff7Virustotal results 15 / 61 (24.59)Heodo
2018-12-04Rechnung_04_12_2018_7043889929.docdoc18bd164483ff99c90968e530f927042201765d4c106f17475b11ec34d83753b7n/aHeodo
2018-12-04Rechnung_2018_12_0281253515.docdocd32e9cb49b1222f665e97a5714a348615d291e0ae8ec96411948bf4d55e26241Virustotal results 15 / 62 (24.19)Heodo
2018-12-04Rechnung_2018_12_5482695925.docdoc50e95922d46925b6500b2e0bbb3862c0c694f9f777374a8dc676c8c1f02fa6bfVirustotal results 16 / 59 (27.12)Heodo
2018-12-04Rechnungsbeilage_2018_12_4161651863.docdoc9df69119644fe42b643d8e6b8e3aa2abe9935bba4a5302908f2abcaaaa038e6cVirustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnungsbeilage_2018_12.docdoccd3188f23ce398c50c2e6852c363e5f5baa8ec701e1d2742eb42d47c01a18579Virustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnungsbeilage_2018_12_1651798341.docdoc7c5554bfb7c1a05b60b8e757cd3108cd48d57b424c58137a91c51fffb20ec20an/aHeodo
2018-12-04Rechnung_04_12_2018_5212307248.docdocb68093d0e5c20ed7bde466053b7b75496b7ec1e40ea917c5f4bcff6b6dd4f0a2Virustotal results 15 / 60 (25.00)Heodo
2018-12-04Rechnungsbeilage_04_12_2018.docdoca8e0d72f2894d5bc41746099789d743330c9eff33b12e4424693739a2e252053Virustotal results 15 / 59 (25.42)Heodo
2018-12-04Rechnungsbeilage_04_12_2018_9788367791.docdoce7aaf552984f5b0612f5e613fde402cb04962e468ce4cb949931aaf21d86a833n/aHeodo
2018-12-04Rechnungsbeilage_2018_12.docdoc4fd253e3055fad5a280c0e262f13b676acb7791f22c3b1d44bce689e4eec4decVirustotal results 13 / 59 (22.03)Heodo
2018-12-04Rechnungsbeilage_2018_12_4495107292.docdocae17d4e7bf4eadc4fc27490bc70dfc28ebe148a0b0684915cd41fa0e6edab494Virustotal results 16 / 58 (27.59)Heodo
2018-12-04Rechnungsbeilage_04_12_2018.docdoc1b390aa7c1cb74b4a4fb2c4cd5f8f68b0537fed853b6873dd5f0bed424231890Virustotal results 14 / 60 (23.33)Heodo
2018-12-04Rechnung_04_12_2018_2410869256.docdocb41b3d870a1619c06aa83689160097241be52705c580f4f5f2b3eb8c6e0c29fdVirustotal results 13 / 59 (22.03)Heodo
2018-12-04Rechnung_04_12_2018.docdoc7ae2688239a0d8cf45d2f1e1dbed6f098c5dc24e087a4aaab5245c504ea8309fVirustotal results 14 / 60 (23.33)Heodo
2018-12-04Rechnung_2018_12.docdoc09d1c10ad5428d2674399f87af6c2804858c9ff0d09f43ab45a1248c7930896cVirustotal results 14 / 59 (23.73)Heodo
2018-12-04Rechnung_04_12_2018_4354080414.docdoc2dc672be23d164a415f13438948a4cae02ea046d562042ae9cda8d460b0e239fVirustotal results 13 / 61 (21.31)Heodo
2018-12-04Rechnungsbeilage_04_12_2018.docdocb060aae9fa5b55bc47a7ac1e1f870a788f74cc7d39c851933eee4020cd5b09b9Virustotal results 13 / 59 (22.03)Heodo
2018-12-04Rechnung_2018_12_0711137335.docdoc64f1a84680f2f3b499a152b479b7f69bcdc81a7b9fd709fd21a39188d9f3a707Virustotal results 18 / 59 (30.51)Heodo
2018-12-04Rechnungsbeilage_2018_12.docdoc67cb109e92cae47b1f38bf3706ef9a5adf6edc9c23d153cf0941fa5ca34e4818n/aHeodo